Recently Updated Pages
Custom Script
The "Custom Script" Knoc type is simply a script the agent can execute directly on the Agent mach...
Moving from SQLite to PostgreSQL
If you installed Knocknoc Server before version 8.5 (September 2025), your instance is likely usi...
Server installation (on premise)
On a Linux host as Root, execute the below command to setup and install your Knocknoc server. You...
Create users
User creation varies depending on the authentication source in use. "SAML users" are created on-t...
Windows Servers
Windows Servers and RDP/WinRM - removing pre-auth attack surface A mid-sized business utilizes R...
Use cases (overview)
Knocknoc use cases Knocknoc is extremely versatile and can enable just in time network access co...
Logging
Logging is important - we love logging. Because of this, we have included an easy to find, follo...
SaaS deployment
To create a SaaS Server instance (we host it) log in to the licensing portal and follow the promp...
Local Authentication (MFA included)
Knocknoc supports local users in addition to SAML/LDAP. Simply add a user, with a username and p...
v8.5
Knocknoc 8.5 Knocknoc 8.5 delivers key improvements in usability, integrations, and security, ...
High availability
The Knocknoc Server can be deployed in various ways to match your high-availability needs and dep...
Knocknoc Reverse Proxy
The Knocknoc orchestration Agent - which is deployed alongside managed infrastructure (not on des...
HAProxy + KAT
Sometimes IP address restrictions or IP-based allowlisting is not enough, think: airport lounge, ...
Palo Alto
Passive, Active or a combination Passive - Knocknoc's Allowlist features provides a passive inte...
SAML for the Admin Interface
SAML for the admin interface is the same as SAML for the user base with a few very small alterati...
Package Repository Key expired
Debian distros (Ubuntu etc) If you are getting the this error: Failed to fetch https://packages...
BYO PostgreSQL
Knocknoc server v8.5+ installs with a local installation of PostgreSQL by default. However, you m...
IPsets with UFW
This is an example that lets you use UFW (https://wiki.ubuntu.com/UncomplicatedFirewall) and IPse...
IPsets with Shorewall
This is an example that lets you use Shorewall https://shorewall.org/index.html and IPsets to dyn...
Sophos (UTM)
The Sophos UTM device provides firewall and UTM capabilities. Note that this series of devices ar...